On Tue, Sep 20, 2011 at 11:15 AM, Leonard Kroll <span dir="ltr"><<a href="mailto:Leonard.Kroll@umb.edu">Leonard.Kroll@umb.edu</a>></span> wrote:<br><div class="gmail_quote"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
Thank you, adding the missing semi colon fixed the problem and now I get<br>
an error 32.(no data). I would like to lookup the user using "email"<br>
address, but it does not find the user.<br>
<br>
ShibUserPassAuth {<br>
<br>
// Example LDAP authentication<br>
// See:<br>
<a href="https://wiki.shibboleth.net/confluence/display/SHIB2/IdPAuthUserPass" target="_blank">https://wiki.shibboleth.net/confluence/display/SHIB2/IdPAuthUserPass</a><br>
<div class="im"><br>
<br>
<br>
edu.vt.middleware.ldap.jaas.LdapLoginModule required<br>
</div> ldapUrl="ldaps://<a href="http://xxxxdc1.yyyyyyy.net" target="_blank">xxxxdc1.yyyyyyy.net</a><br>
ldaps://<a href="http://xxxxxxxdc2.tyyyyyyy.net" target="_blank">xxxxxxxdc2.tyyyyyyy.net</a>"<br>
baseDN="dc=xxxxxx,dc=net"<br>
bindDn="<a href="mailto:xxxxxxx.yyyyyyy@zzzzz.edu">xxxxxxx.yyyyyyy@zzzzz.edu</a>"<br>
bindCredential="password"<br>
userFilter="email={0}"<br>
subtreeSearch="true";<br>
<br>
// Example Kerberos authentication, requires Sun's JVM<br>
// See:<br>
<a href="https://wiki.shibboleth.net/confluence/display/SHIB2/IdPAuthUserPass" target="_blank">https://wiki.shibboleth.net/confluence/display/SHIB2/IdPAuthUserPass</a><br>
/*<br>
com.sun.security.auth.module.Krb5LoginModule required<br>
useKeyTab="true"<br>
keyTab="/path/to/idp/keytab/file";<br>
*/<br>
<br>
};<br><br></blockquote><div><br></div><div>The bindDn option should contain a fully qualified DN. So something like: cn=manager,ou=people,dc=xxxxxx,dc=net</div><div>Note that the bindDn/bindCredential options are only needed if your LDAP doesn't allow anonymous searches for users.</div>
<div><br></div><div>--Daniel Fisher</div><div><br></div></div>